TechHub

Vasileios Kemerlis📢 Last week, Brown Secure Systems Lab (SSL, <a href="https://gitlab.com/brown-ssl/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://gitlab.com/brown-ssl/</a>) was at the IEEE Symposium on Security and Privacy (S&P) 2025, where we presented our latest work on hardening OS kernels against attacks that (ab)use heap-based memory-safety vulnerabilities. <a href="https://infosec.exchange/tags/IUBIK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IUBIK</a> leverages memory tagging (MTE) and pointer authentication (PA), available in <a href="https://infosec.exchange/tags/ARM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ARM</a> CPUs, to efficiently and effectively isolate attacker-controlled input from security-critical data in the kernel heap.👏 Kudos to Marius Momeu (leading author) who did a terrific job presenting our paper -- joint work with Alexander Gaidis (Brown University) and Jasper von der Heidt (Technical University of Munich).✳️ Paper: <a href="https://cs.brown.edu/~vpk/papers/iubik.sp25.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/iubik.sp25.pdf</a> 💾 Code: <a href="https://github.com/tum-itsec/iubik" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/tum-itsec/iubik</a> (coming soon)<a href="https://infosec.exchange/tags/iubik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iubik</a> <a href="https://infosec.exchange/tags/mte" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mte</a> <a href="https://infosec.exchange/tags/pac" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pac</a> <a href="https://infosec.exchange/tags/acm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#acm</a> <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/browncs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browncs</a> <a href="https://infosec.exchange/tags/ieeesp2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ieeesp2025</a>

Greg LloydSee the return of Brown Sciences Library Tetris“Tetris, Snake, Pong, and other retro classics on the ScilLi. Partial Showcase (Floors 5-11) • Wednesday 5/14 @ 10:00pm EDT • Thursday 5/15 @ 10:00pm EDTFull Showcase (Floors 3-13) ° Convocation Week - Time TBDThis is probably the last time this event will run, so make sure to see it before it's gone!!”Instagram: scilibtetris<a href="https://federate.social/tags/tetris" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tetris</a> <a href="https://federate.social/tags/browncs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browncs</a> <a href="https://federate.social/tags/ProvidenceRI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ProvidenceRI</a>

Vasileios KemerlisAs we welcome 2025, I'd like to take a moment to reflect on what an extraordinary year 2024 has been for Brown CS Secure Systems Lab (<a href="https://gitlab.com/brown-ssl/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://gitlab.com/brown-ssl/</a>). It has been a year of innovation, creativity, and growth—both for the lab and for me personally as its director. Witnessing the passion, dedication, and brilliance of our team—Neophytos Christou, Alexander Gaidis, Marius Momeu, <a href="https://mastodon.social/@dijin" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@dijin</a>, and Vaggelis Atlidakis—has been truly fulfilling and inspiring!In 2024, we tackled complex challenges and made significant strides in advancing our research on software hardening and OS kernel protection. Here are some highlights from this remarkable year:✳️ Marius Momeu presented <a href="https://infosec.exchange/tags/SafeSlab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SafeSlab</a> at <a href="https://mastodon.acm.org/@acm_ccs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@acm_ccs</a> <a href="https://infosec.exchange/tags/CCS2024" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCS2024</a>. Safeslab hardens the Linux SLUB allocator against exploits that abuse use-after-free (<a href="https://infosec.exchange/tags/UaF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UaF</a>) vulnerabilities, using <a href="https://infosec.exchange/tags/Intel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intel</a> <a href="https://infosec.exchange/tags/MPK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MPK</a>. (Joint work with Technical University of Munich and <a href="https://infosec.exchange/@mikepo" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@mikepo</a>.) 📄 <a href="https://cs.brown.edu/~vpk/papers/safeslab.ccs24.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/safeslab.ccs24.pdf</a> 💾 <a href="https://github.com/tum-itsec/safeslab" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/tum-itsec/safeslab</a>✳️ Neophytos Christou presented <a href="https://infosec.exchange/tags/Eclipse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Eclipse</a> at <a href="https://mastodon.acm.org/@acm_ccs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@acm_ccs</a> <a href="https://infosec.exchange/tags/CCS2024" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCS2024</a>. Eclipse is a compiler-assisted framework that propagates artificial data dependencies onto sensitive data, preventing the CPU from using attacker-controlled input during speculative execution. 📄 <a href="https://cs.brown.edu/~vpk/papers/eclipse.ccs24.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/eclipse.ccs24.pdf</a> 💾 <a href="https://gitlab.com/brown-ssl/eclipse" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://gitlab.com/brown-ssl/eclipse</a>✳️ Di Jin presented <a href="https://infosec.exchange/tags/BeeBox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BeeBox</a> at the <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@usenixassociation</a> Security Symposium 2024. BeeBox hardens <a href="https://infosec.exchange/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> BPF/eBPF against transient execution attacks. <a href="https://infosec.exchange/tags/usesec24" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#usesec24</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/beebox.sec24.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/beebox.sec24.pdf</a> 💾 <a href="https://gitlab.com/brown-ssl/beebox" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://gitlab.com/brown-ssl/beebox</a>✳️ Yaniv David presented <a href="https://infosec.exchange/tags/Quack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Quack</a> at the NDSS Symposium 2024. Quack hardens PHP code against deserialization attacks using a novel (static) duck typing-based approach. (Joint work with Andreas D Kellas and Junfeng Yang.) <a href="https://infosec.exchange/tags/NDSSsymposium2024" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NDSSsymposium2024</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/quack.ndss24.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/quack.ndss24.pdf</a> 💾 <a href="https://github.com/columbia/quack" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/columbia/quack</a>✳️ Marius Momeu presented <a href="https://infosec.exchange/tags/ISLAB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ISLAB</a> at <a href="https://mastodon.acm.org/@ACM" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ACM</a> <a href="https://infosec.exchange/tags/ASIACCS24" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASIACCS24</a>. ISLAB hardens SLAB-based (kernel) allocators, against memory errors, via SMAP-assisted isolation. (Joint work with Technical University of Munich and <a href="https://infosec.exchange/@mikepo" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@mikepo</a>.) <a href="https://infosec.exchange/tags/asiaccs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#asiaccs</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/islab.asiaccs24.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/islab.asiaccs24.pdf</a> 💾 <a href="https://github.com/tum-itsec/islab" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/tum-itsec/islab</a>🏆 <a href="https://infosec.exchange/tags/EPF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EPF</a> (presented by Di Jin at <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@usenixassociation</a> <a href="https://infosec.exchange/tags/ATC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ATC</a> 2023) was the runner-up for the "Bug of the Year" award ("Weirdest Machine" category) at IEEE Symposium on Security and Privacy LangSec (Language-Theoretic Security) workshop 2024! <a href="https://infosec.exchange/tags/atc23" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#atc23</a> <a href="https://infosec.exchange/tags/LangSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LangSec</a> ⌨️ <a href="https://langsec.org/spw24/bugs-of-the-year-awards.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://langsec.org/spw24/bugs-of-the-year-awards.html</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/epf.atc23.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/epf.atc23.pdf</a> 💾 <a href="https://gitlab.com/brown-ssl/epf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://gitlab.com/brown-ssl/epf</a>🏅 I am honored and delighted to have received the "Distinguished Reviewer Award" at <a href="https://mastodon.acm.org/@acm_ccs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@acm_ccs</a> <a href="https://infosec.exchange/tags/CCS2024" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCS2024</a>!🏅Alexander Gaidis has been awarded the "Distinguished Artifact Reviewer" award at the <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@usenixassociation</a> Security Symposium 2024! <a href="https://cs.brown.edu/news/2024/09/20/brown-cs-phd-student-alexander-j-gaidis-has-been-named-a-usenix-security-2024-distinguished-artifact-reviewer/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cs.brown.edu/news/2024/09/20/brown-cs-phd-student-alexander-j-gaidis-has-been-named-a-usenix-security-2024-distinguished-artifact-reviewer/</a> <a href="https://infosec.exchange/tags/usesec24" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#usesec24</a> <a href="https://infosec.exchange/tags/proudadvisor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#proudadvisor</a>📢 I had the great pleasure of discussing some of these works recently at the Computer Systems Seminar at Boston University! 📽️ <a href="https://www.bu.edu/rhcollab/events/bu-systems-bu%E2%99%BAs-seminar/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bu.edu/rhcollab/events/bu-systems-bu%E2%99%BAs-seminar/</a><a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/browncs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browncs</a> 🚀

Recent searches

Search options

Administered by:

Server stats:

#browncs